IOC Radar
IPMediumSignal 61/100

46.28.109.131

First Seen
Dec 7, 2024
Last Seen
Jun 19, 2026
Dec 7
First Seen
566d ago
Jun 19
Last Seen
8d ago
14
Reports
source reports
61%
Confidence
medium
Found in 14 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
61%
Signal Score
61 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Feed Intelligence Summary

14 reports61% confidence
14
Source reports
61%
Confidence score
Category tags
active scanactive scanningapacheapache attackeraptauto-generated securitybad web botblocklistblocklist_allbotnet activitybrute forcebrute force attackbrute-forcebruteforcecredential accesscredential stuffingczczechiaddosdenial of serviceexploitation activityhackingidentity & access exploitationindicatormalicious-ipmalwarenetworkpassword attacksreconnaissanceresearchedscannerspamssh attackt1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1595.001t1595.002t1595.003threat actorthreat-intelweb app attackweb application attackweb exploitation

Activity Timeline

1 total obs
Jun 19Jun 19

Threat Activity Heatmap

· Peak: 2026-06-19
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
61
SIGNAL
Signal Score
61%
Confidence
14
Reports
First seenDec 7, 2024
Last seenJun 19, 2026

VirusTotal

Not checked

WHOIS

raw
inetnum: 46.28.109.0 - 46.28.109.255 netname: WEDOS-HOSTING descr: WEDOS hosting services country: CZ admin-c: PS10635-RIPE tech-c: PS10635-RIPE status: ASSIGNED PA mnt-by: WEDOS-MNT mnt-lower: WEDOS-MNT mnt-routes: WEDOS-MNT remarks: INFRA-AW created: 2011-02-03T19:07:08Z last-modified: 2011-02-03T19:07:08Z source: RIPE person: Petr Stastny address: WEDOS Internet, a.s. address: Masarykova 1230 address: Hluboka nad Vltavou address: 37341 phone: +420 380999333 nic-hdl: PS10635-RIPE mnt-by: WEDOS-MNT created: 2010-07-20T17:40:40Z last-modified: 2017-10-30T22:10:22Z source: RIPE # Filtered route: 46.28.104.0/21 descr: WEDOS Internet, a.s. origin: AS197019 mnt-by: WEDOS-MNT created: 2010-08-05T08:33:03Z last-modified: 2010-08-05T08:33:03Z source: RIPE
references
https://malware-filter.gitlab.io/malware-filter/botnet-filter.txt

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 8 days ago
Appeared in 14 threat reports
1 user flagged this